How to reproduce : 

a / Create a project , and deactivate all modules.

b/ On this project, add a "user1" user.

c/ On user1, update rights, and set no rights. 

d/ Update project by adding Files module.

e/ Consult user1 rights  => He has no access to File module.